Skywise - Cloud Security Architect

Description

The company is a digital services business wholly owned by the company. It offers a single platform that links planning and operations control, flight, technical and ground operations, using interoperable digital tools for end-to-end operations.

The Skywise team is part of the Security function and shapes, runs and improves the cloud infrastructure and platform services. The role keeps the Skywise security posture strong by defining, rolling out and refining the cloud security strategy.

You will be the main contact for the Skywise Data Platform Operations team. You will set the security architecture and tools for the AWS platform that hosts the product, and for other platforms used in internal company operations. You will own identity and access design, management and improvement.

You will also set up and maintain the cloud security link with the company Security Operations Center so the Skywise cloud platforms are monitored effectively.

Responsibilities

• Set and enforce cloud security baselines, landing zones and internal infrastructure perimeters across Skywise cloud platforms, such as AWS and GCP.
• Design and build cloud-native Identity and Access Management (IAM) that enforces least privilege, short-lived service credentials and key management. Run regular reviews and propose improvements.
• Work with the Cyber Security Architect so products run on secure, isolated and compliant platforms.
• Keep the Skywise platforms compliant with company security standards and cloud security control certifications.
• Define security controls for global platform monitoring and build a strong working relationship with the Skywise Data Platform Operations teams.
• Select and run cloud security posture tools that catch configuration drift, unauthorized exposure and misconfiguration in real time.
• Define and implement architecture rules for global platform monitoring, so breaches are detected, handled and recovered from.
• Act as the single point of contact for the company Security Operations Center on the Skywise cloud platforms.

Requirements

• 7+ years in cyber security.
• 3 or more years in cloud security architecture within a company or SaaS environment.
• Experience securing native cloud services on AWS, GCP or Azure.
• Advanced knowledge of cloud security controls, including segmentation and key management.
• Experience with identity and access management in cloud environments.
• AWS security or specialty certification is a plus.
• Certified Cloud Security Professional (CSSP) is a plus.
• Strong ability to work across functions.
• Ability to identify security risks tied to cloud platforms and explain them clearly.
• Pragmatic, proactive problem solver.
• A mindset of continuous improvement.
• Knowledge of DevOps practices and concepts.

Conditions

Permanent contract, Professional experience level, in the Cyber Security job family.

Hybrid work with flexible hours: 3 days per week in the Blagnac office.

Based at the company in Canada (Skywise Canada Inc.).

You must stay aware of potential compliance risks and act with integrity.

The company welcomes applications from all backgrounds, ages, genders, disabilities, sexual orientations and religious beliefs, and works to build a diverse, inclusive workforce.

The company never asks for payment during recruitment. Report any impersonation of the company that asks for money to the company's site.

Benefits

• 25 paid annual leave days plus collective and individual JRTT, pro-rated to working time.
• A 6th week of paid leave, pro-rated to working time.
• A 12-day family reason absence package.
• 5 extra full-pay days for maternity, paternity and adoption leave.
• Comprehensive health insurance.
• 3 extra paid annual leave days for employees with RQTH status.
• Success sharing (intéressement) and profit sharing (participation) schemes.
• A monthly seniority bonus for employees with 3+ years of service.
• The company Group savings plans (PEG), including the company share investment after 3+ months of service.
• A Time Saving Account (TSA).
• Collective and mandatory retirement savings plans (PERCOL and PERO).
• Several lunch catering options, including canteens, food trucks and bakeries.
• Staff council (CSE) social, cultural and sports activities and services.
• Shuttle (navette) service.
• Training and development to support career growth.